Gaia, you have to be kidding me.
1 failed login = captcha. Looks like they may implement it fully, captcha on login every time.